2819c035c9318c6bdc2b3048642644c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2819c035c9318c6bdc2b3048642644c7_JaffaCakes118
Size

853KB
MD5

2819c035c9318c6bdc2b3048642644c7
SHA1

e33b476112b6f3b443476b24842e5237101a9ca2
SHA256

a222670ee9424074c2e463d3f3575806f18610236224d4d9ab1326f0f37eb882
SHA512

46b2563d1d0e591debc6236248af3ddcfb0ba3b2f67a104b2df8199bf4d4e76a2d66417b7480602c8d53e05706c7d01c760feae3a0355be926f519f631ba71ab
SSDEEP

12288:iMsErqnMEk+vpkrcVROII61k5C0iwtjMIoy039sQg0Lno7VJ2uFDWxEXy1u18lx+:i+roNnVgIj1GntYIobP8Dz6YQu18lg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2819c035c9318c6bdc2b3048642644c7_JaffaCakes118

Files

2819c035c9318c6bdc2b3048642644c7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Administrator\My Documents\Visual Studio 2008\Projects\WindowsApplication1\WindowsApplication1\obj\Release\WindowsApplication1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 209B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ